AWS Security Hub for Jira Cloud

This app requires broad Jira permissions such as reading and modifying issues, which allows it to access sensitive security and project data; but this is not unique to this app, many other apps also ask for similar set of permissions. The key consideration is the security maturity and trustworthiness of the specific app.   For this app, there are a few concerns from a security assessment perspective:   If you look at App Support, the Marketplace lists the app as ‘Unsupported’, which means there is no guaranteed support or commitment to timely security fixes. This app is not listed as part of the Atlassian Marketplace Bug Bounty program, which is an important additional security assurance. Until now only 200+ installs are done indicating limited maturity. There is no separate app-specific security policy; it appears to be covered under the broader AWS security policy.   Based on these, I would NOT recommend this app at this point in time and would instead suggest reassessing it once there is higher maturity and support commitment.